[cef] Add time zone config option

packages/cef/changelog.yml

@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "0.6.0"
+  changes:
+    - description: Add CEF time zone config option.
+      type: enhancement
+      link: https://github.com/elastic/integrations/pull/1723
 - version: "0.5.2"
   changes:
     - description: Convert to generated ECS fields

packages/cef/data_stream/log/_dev/test/system/test-logfile-config.yml

@@ -4,3 +4,4 @@ data_stream:
   vars:
     paths:
       - "{{SERVICE_LOGS_DIR}}/*.log"
+    decode_cef_timezone: UTC

packages/cef/data_stream/log/agent/stream/log.yml.hbs

@@ -19,6 +19,9 @@ processors:
       - {from: "message", to: "event.original"}
 - decode_cef:
     field: event.original
+{{#if decode_cef_timezone}}
+    timezone: {{ decode_cef_timezone }}
+{{/if}}
 {{#if processors}}
 {{processors}}
 {{/if}}

packages/cef/data_stream/log/agent/stream/udp.yml.hbs

@@ -15,6 +15,9 @@ processors:
       - {from: "message", to: "event.original"}
 - decode_cef:
     field: event.original
+{{#if decode_cef_timezone}}
+    timezone: {{ decode_cef_timezone }}
+{{/if}}
 {{#if processors}}
 {{processors}}
 {{/if}}

packages/cef/data_stream/log/manifest.yml

@@ -15,6 +15,13 @@ streams:
         show_user: true
         default:
           - /var/log/cef.log
+      - name: decode_cef_timezone
+        type: text
+        title: CEF Timezone
+        multi: false
+        required: false
+        show_user: false
+        description: IANA time zone or time offset (e.g. `+0200`) to use when interpreting timestamps without a time zone in the CEF message.
       - name: tags
         type: text
         title: Tags
@@ -63,6 +70,13 @@ streams:
         required: true
         show_user: true
         default: 9003
+      - name: decode_cef_timezone
+        type: text
+        title: CEF Timezone
+        multi: false
+        required: false
+        show_user: false
+        description: IANA time zone or time offset (e.g. `+0200`) to use when interpreting timestamps without a time zone in the CEF message.
       - name: tags
         type: text
         title: Tags

packages/cef/manifest.yml

@@ -1,6 +1,6 @@
 name: cef
 title: CEF
-version: 0.5.2
+version: 0.6.0
 release: experimental
 description: This Elastic integration collects logs in common event format (CEF)
 type: integration
@@ -10,7 +10,7 @@ categories:
   - network
   - security
 conditions:
-  kibana.version: ^7.14.0
+  kibana.version: ^7.16.0
 policy_templates:
   - name: cef
     title: CEF logs